Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC73E/445545622C9511ECBEBC4248C4F9AE02/JD8tRHJ_HRuAefQBT2n0oHTR8eo.mft
File:                     JD8tRHJ_HRuAefQBT2n0oHTR8eo.mft (raw, json)
Hash identifier:          QKX/tIW6n8hoB+Rm40y8h1hDR0TIjw7Eg+0TZi6Na7M=
Subject key identifier:   E2:63:6C:9D:45:CC:8A:04:A3:EF:77:51:C3:ED:05:8F:FD:02:48:12
Authority key identifier: 24:3F:2D:44:72:7F:1D:1B:80:79:F4:01:4F:69:F4:A0:74:D1:F1:EA
Certificate issuer:       /CN=A91AC73E/serialNumber=243F2D44727F1D1B8079F4014F69F4A074D1F1EA
Certificate serial:       054E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JD8tRHJ_HRuAefQBT2n0oHTR8eo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AC73E/445545622C9511ECBEBC4248C4F9AE02/JD8tRHJ_HRuAefQBT2n0oHTR8eo.mft
Manifest number:          0546
Signing time:             Sun 01 Mar 2026 00:02:21 +0000
Manifest this update:     Sun 01 Mar 2026 00:02:21 +0000
Manifest next update:     Sun 08 Mar 2026 00:02:21 +0000
Files and hashes:         1: JD8tRHJ_HRuAefQBT2n0oHTR8eo.crl (hash: x6wdxQGKXcwfUFA0ft7J5mCs6YkOGyDfcDV55H1Ijmk=)
                          2: 020CA7B24E4C11EC8045E71EC4F9AE02.roa (hash: lEj2Xm0LQ+xioePgGHWRdpuXrIhiuAdZJ8cF1TzyFTU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AC73E/445545622C9511ECBEBC4248C4F9AE02/JD8tRHJ_HRuAefQBT2n0oHTR8eo.crl
                          rsync://rpki.apnic.net/member_repository/A91AC73E/445545622C9511ECBEBC4248C4F9AE02/JD8tRHJ_HRuAefQBT2n0oHTR8eo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JD8tRHJ_HRuAefQBT2n0oHTR8eo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 00:02:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1358 (0x54e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AC73E, serialNumber=243F2D44727F1D1B8079F4014F69F4A074D1F1EA
        Validity
            Not Before: Mar  1 00:02:21 2026 GMT
            Not After : Mar  8 00:02:21 2026 GMT
        Subject: CN=69a3820d-2608
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:4b:6a:9a:64:7e:09:15:8a:46:9a:93:7f:f8:
                    70:8e:e8:9c:62:af:ed:82:b0:b7:73:07:86:29:c7:
                    e1:e3:96:42:57:e1:4d:93:ab:4d:5e:cd:cc:9b:18:
                    b8:ee:14:37:61:99:25:ce:7b:6f:9d:16:7c:14:4a:
                    27:65:d0:44:b4:33:92:4c:82:6d:19:b7:b8:36:50:
                    3e:c7:60:df:5b:60:9f:59:b6:2f:fd:31:17:bd:83:
                    76:bd:95:b3:50:40:fe:f2:09:1e:46:8a:ff:22:37:
                    0b:eb:b9:16:7d:24:bf:dd:fe:e3:c2:96:39:43:be:
                    50:8a:a5:63:a6:6b:e5:d0:c6:c0:7e:59:56:87:36:
                    eb:06:a4:0c:0e:84:3d:ce:2d:f6:21:53:1c:a4:44:
                    45:f6:4f:0a:73:2a:35:89:9b:88:6d:5d:10:ed:30:
                    12:4e:c5:ab:d9:2c:85:93:33:b2:b9:b0:66:6c:01:
                    af:68:35:1f:a5:df:e6:6d:89:1b:0f:ff:70:67:3c:
                    06:4f:50:1f:09:e2:0c:93:14:4f:46:fe:08:48:cd:
                    89:ea:75:17:17:91:1f:f7:ce:1e:0e:ac:23:1a:8f:
                    95:3e:79:a6:3b:c9:22:05:5f:41:3e:0b:5e:79:04:
                    24:2e:bd:c5:1d:43:5d:b1:f9:d6:0c:59:f6:fd:4a:
                    8f:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:63:6C:9D:45:CC:8A:04:A3:EF:77:51:C3:ED:05:8F:FD:02:48:12
            X509v3 Authority Key Identifier:
                keyid:24:3F:2D:44:72:7F:1D:1B:80:79:F4:01:4F:69:F4:A0:74:D1:F1:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AC73E/445545622C9511ECBEBC4248C4F9AE02/JD8tRHJ_HRuAefQBT2n0oHTR8eo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JD8tRHJ_HRuAefQBT2n0oHTR8eo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC73E/445545622C9511ECBEBC4248C4F9AE02/JD8tRHJ_HRuAefQBT2n0oHTR8eo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:4a:ce:d4:95:15:82:23:6a:7d:71:56:07:d7:08:b2:75:0b:
         e0:50:3a:81:bf:2c:07:ee:d1:4e:03:70:4a:07:39:ff:b1:82:
         b4:68:71:ba:a2:1a:43:e3:1b:a1:4d:a5:cd:96:58:d5:03:cf:
         25:09:29:3d:85:de:1d:5f:09:9b:e4:89:99:14:06:6c:ba:19:
         49:75:93:94:ad:bf:35:79:99:62:54:34:43:cd:74:9a:79:b9:
         f0:33:9e:95:20:e9:39:68:8b:ed:8d:56:34:9f:c9:ee:58:df:
         e7:c4:bc:a1:3e:8f:b0:29:e9:f8:7f:48:31:40:4c:ac:a8:cd:
         42:61:16:65:b9:0b:32:f7:41:03:c0:9f:2a:76:4a:45:df:0f:
         d5:8b:19:c3:46:86:17:75:46:4b:95:d9:b0:60:65:fd:ff:41:
         13:de:2f:19:8a:9e:10:32:49:99:8f:7a:a0:b6:e0:69:77:9a:
         9b:3a:e2:64:23:01:f4:ed:a9:9e:ef:c8:0e:cd:a9:eb:05:1a:
         6d:d4:97:d0:70:67:a5:a5:3d:55:88:e3:13:73:54:17:b3:45:
         4c:fa:30:95:f3:7d:ff:3c:fb:8d:78:8c:ab:ec:13:e6:e8:e7:
         4b:74:b2:e6:ce:08:8b:11:24:b9:bd:6f:3f:5b:c0:fe:c7:e0:
         40:fe:8f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:56:06 2026 by rpki-client